General
-
Target
7b41368bae47e4e02a054fad1155da9b.exe
-
Size
244KB
-
Sample
221112-dx2jtsge8z
-
MD5
7b41368bae47e4e02a054fad1155da9b
-
SHA1
210cb9b322dc316f25b1c614af26174eb7dceda1
-
SHA256
e2cb8407436a5a2ed6f1220df5805900cf1df475eb9493a81508e61748144e1e
-
SHA512
525c76bd414657480f7f543326c13d7c84149cb8f172d10039de3ce66751cb1afc04b7d5b374b917405401f54883e594cb52e29f34a521debdfb959a71eded6f
-
SSDEEP
6144:PUmnhkRWlYBmwedJWh3FO9F9JCm7Xyn2APRNXyJ0yiwMREUxL0w4bJsEy:LnhkRWvWh3FO9F9JCm7Xyn2APbXymwM5
Static task
static1
Behavioral task
behavioral1
Sample
7b41368bae47e4e02a054fad1155da9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b41368bae47e4e02a054fad1155da9b.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
redline
Google2
167.235.71.14:20469
-
auth_value
fb274d9691235ba015830da570a13578
Targets
-
-
Target
7b41368bae47e4e02a054fad1155da9b.exe
-
Size
244KB
-
MD5
7b41368bae47e4e02a054fad1155da9b
-
SHA1
210cb9b322dc316f25b1c614af26174eb7dceda1
-
SHA256
e2cb8407436a5a2ed6f1220df5805900cf1df475eb9493a81508e61748144e1e
-
SHA512
525c76bd414657480f7f543326c13d7c84149cb8f172d10039de3ce66751cb1afc04b7d5b374b917405401f54883e594cb52e29f34a521debdfb959a71eded6f
-
SSDEEP
6144:PUmnhkRWlYBmwedJWh3FO9F9JCm7Xyn2APRNXyJ0yiwMREUxL0w4bJsEy:LnhkRWvWh3FO9F9JCm7Xyn2APbXymwM5
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-